Description
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | microsoft-identity-web | >=4.16.0 <4.16.1 – < 4.16.1, <3.16.0 – < 3.16.0 | 4.16.1 |
Advisories 1
- MSRC-CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability Microsoft Security Response Center · Oct 19, 2026
References
- Microsoft Identity Web Elevation of Privilege Vulnerability vendor-advisory patch